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Abstract. Given a number field K and a bound B, we describe an algorithm for listing all the elements of K 
having relative height at most B. Two lists of numbers are computed: one consisting of elements x G K for which 
it is known with certainty that Hj^ ( x ) < B , and one containing elements x such that | Hf^ (x) — B| < tf or a tolerance 
t chosen by the user We show that every element x G Kof height at most B must appear in one of the two lists. 



1. Introduction 

Let K be a number field with ring of integers Ok, and let be the relative height function on K. Given 
any bound B it is known that the set of all x E K with Hk{x) < B is finite flii §3.1]. Moreover, there is an 



asymptotic formula for the number of such elements, due to Schanuel 11811 : 

#{xeK: Hk(x) < B} ~ CkB^, 

where Ck is an explicit constant which depends only on K. However, there does not appear to be in the 
literature an algorithm that would allow fast computation of all these elements. In fl§] Petho and Schmitt 
require such an algorithm to be able to compute the Mordell-Weil groups of certain elliptic curves over real 
quadratic fields. They obtain an algorithm by showing that if coi, . . . ,0Jn is an LLL-reduced integral basis 
of K, then every element x E K with Hj^(x) < B can be written as 

aicoi + ■ ■ ■ + a„LO„ 

X = , 

c 

where ai, . . . ,a„,c are integers within certain explicit bounds depending only on B and K. The set of all such 
numbers x is finite, so one would only need to search through this set and discard elements whose height is 
greater than B. Unfortunately, in practice this method is slow because the search space is very large. In this 
paper we describe an algorithm which is faster, assuming class group representatives for arid a basis 
for the unit group of Ok can be computed efficiently. Sample computations showing the improvement in 
performance may be seen in section [6l 

Our motivation for designing a fast algorithm that can handle relatively large bounds B comes from arith- 
metic dynamics. In iflill Poonen provides a conjecturally complete list of rational preperiodic graph struc- 
tures for quadratic polynomial maps defined over Q. It is then natural to ask what are the possible preperi- 
odic graph structures that can occur for such maps over other number fields. In order to gather data about 
these graphs one needs to be able to compute all the preperiodic points of a given quadratic map. It is 
possible to give an explicit upper bound for the height of any preperiodic point of a given map, so a first 
step towards computing preperiodic points is computing all points of bounded height. Further details on 
this question, together with the generated data, will be presented in a subsequent paper [7]. 

Acknowledgements. We thank Xander Faber, Dino Lorenzini, and Andrew Sutherland for their comments 
on earlier versions of this paper; Pete Clark for help finding references; and Robert Rumely for suggestions 
on improving the efficiency of the main algorithm. We also thank the referee for a careful reading of this 
paper, and for helpful suggestions. 
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2. Background and Notation 



Let K be a number field, let a^, . . . , be the real embeddings of K, and ti, Ti, . . . , t^^, t^^ the complex 
embeddings. Corresponding to each of these embeddings there is an archimedean absolute value on K 
extending the usual absolute value on Q. For an embedding a, the corresponding absolute value | |u is 
given by \x\a = \cr{x)\£, where | ■ |c is the usual complex absolute value. Note that | |y, = | |t, for every 
i. We will use the notation to denote the set of absolute values corresponding to ai,. . ., Ur-^, T\,..., Trj- 
For a place v e we denote by cr-^, the corresponding embedding i^C ^ C. 

For every maximal ideal p of the ring of integers Ox there is a discrete valuation i^p on X with the property 
that for every a G K*, Cp(fl) is the power of p dividing the principal ideal [a). If p lies over the prime 
p of Z, there is an absolute value | |p on K extending the p-adic absolute value on Q. Let e(p) and /(p) 
denote the ramification index and residual degree of p, respectively This absolute value is then given by 
|x|p = (Np)-^'p(^)/('^(P)/(P)). We use the notation to denote the set of all absolute values | |p, and we let 
Mk = U M\. 

For an absolute value v G M^, let be the completion of K with respect to v, and let be the completion 
of Q with respect to the restriction of v to Q. Note that Q,, = IR if c e M^, and Qi, = Qp if £ M\ 
corresponds to a maximal ideal p lying over p. The local degree of K at is given by Ui, = : Q,,]. If 
V corresponds to a real embedding of K, then Ki, = Qi, = M, so = 1. If z; corresponds to a complex 
embedding of K, then K-o = C and Qi, = M, so n-o = 2. Finally, if v corresponds to a maximal ideal p, then 
n-o = e(p)/(p)- 

The relative height function Hx : K — > ]R>i is defined by 

Hk(7)= n max{|7|«M} 

and has the following properties: 

• For any a, ,6 e Kwith^ 0, HK(a/^) = n^gMKmax{|a|j;", 

• For any a, ^ £ K,Hi^{oL^) < HK{oi)Hi^{^) . 

• For any a, (3 e with ^ 7^ 0, H^Ca/^) = N{a, py'^UveM^T^^^iWl"'' A^\v''}-'tiere N{a, 
denotes the norm of the ideal generated by a and /3. 

• For any 7 e K*, Hk{7) = Hk(1/7). 

• For any 7 £ X and any root of unity (, E K, Hk{^j) = Hj^(7). 

• If a e Ok satisfies HK(a) < D, then |a|"" < D for all v e Mg'. 



3. The Method 

Let X be a number field with relative height function Hk ■ K ]R>i . Given a bound B > 1, we want 
to list all numbers 7 £ K satisfying H^ij) < B. Our method for finding all such numbers is based on 
the observation that by using known algorithms this problem can be reduced to the question of finding all 
units of boimded height. In essence, the idea is to generalize the following statement that holds over Q: if 
X £ Q* and Hq(x) < B, then x can be written as x = ±a/b where a and b are integers such that {a, b) = 1 
and l^'l < B. Over a general number field K the analogous statement we make is that given x E K* with 
Hk{x) < B, it is possible to write x in the form x = u ■ a/b, where u E is a unit whose height is explicitly 
bounded; a and b are elements of Ok such that {a,b) = a, where o is one ideal from a predetermined list of 
ideal class representatives for Ok; and |Nj^/Q(fl)|, \NK/Q{b)\ < B ■ N{a). 
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3.1. The Main Algorithm. The next result provides the theoretical basis for our algorithm. The following 
notation will be used in the proof: r = ri + r2 — 1, h is the class number of X, is the group of units 
of Ok, and }Ik is the group of roots of unity in K. Recall lEol Chapter 5] that there are fundamental units 
El, ... , £,■ E such that every unit u E can be written uniquely as u = ^e"^ ■ ■ ■ e'/' for some integers 
rii, . . . ,nr and some ^ G ji^- For an ideal I of we let N(/) denote the norm of the ideal. 

Proposition 3.1. Let B > 1 be a fixed bound. Let aj,. . .,a;, be integral ideals forming a complete set of ideal 
class representatives for Ok, and let £-[,.. .,£r be a set of fundamental units. For each ideal Of let g^i, . . . ,g^^si 
generators for all the nonzero principal ideals contained in and having norm at most B ■ N(af ). Suppose 7 e X* 
satisfies HKij) < B. Then there exist an ideal a£, indices 1 < i < j < S£, and an integer tuple [ui, . . . , n,-) such 
that: 

(1^) ige,i'ge,j) = at 

(2) The unit u = e"^ ■ ■ ■ e"'' satisfies Hk{u) < B ■ HK{g£^j/ge^i)- 

(3) Letting c = ugej/gq, 7 belongs to the set {^c : [, e Hk} U {^/c : ^ e jik}- 

Moreover, every element x in the above set satisfies Hk{x) = Hk{j)- 

Note: in the case r = we should omit from the proposition the fundamental units and the tuple {ni, . . . ,n,), 
and take the unit u to be 1. 

Proof. We can write the fractional ideal generated by 7 as (7) = IJ~^, where / and / are coprime integral 
ideals. Since / and / are in the same ideal class, there is some ideal a( (namely, the one representing the 
inverse class of / and /) such that the ideals a(I and a^J are principal; say (a) = a^I, = a^/. Note that 
since / and / are coprime we have (a, /5) = a^. Since (7) = (a)/ (j6), we may assume, after scaling a by a 
unit, that 7 = a//5. Thus, we have 7 = a/j6 with = a^. Since Hk{j) < B, then 

n max{|a|M/5|;;"} <B-N(a,). 

In particular, 

\Nk/q{c^)\= n Wlv" <B-N{a() and |Nk/q(/5)| = H If^lv" < B ■ N{ai). 

Since N(a), N(/3) < B ■ N{a(), we must have (a) = {gf^a) ^^id (j6) = (gf^j,) for some indices a,b < Sf. Thus, 
there are units Ua,ui, such that a = gi^a^ia and /5 = gc^h^ib- Clearly we have = {ge,a,Se,b)- Let t = Ua/u^. 
Then 7 = tg^^af gl,h, and since H^i'y) < B, then 

HK{t) = HKi7g(:,b/gt,a) < HK{7)HK{gi,h/gi,a) < B ■ HK{ge,b/g(:,a)- 

Write f = ^e™^ ■ ■ ■ e™'' for some integers mi, . . . , m,- and some ^ G We define indices i,j and an integer 
tuple {n\, . . . ,nr) as follows: if a < b we let z = a,] = b,{ni, . . . ,nr) = (mi, . . . , m,). If a > b we let 
i = b,i = a, (wi, ... ,nr) = {—mi, . . . , —my). Note that in either case we have i < j and {gi,i,gi^j) = 
proving point (1). Let m = e"^ ■ ■ ■ e"' . Then Hk{u) = Hx(f), so Hk{u) < B ■ Hjcige^j/ gej), which proves 
point (2). Letting c = ugf^^i/ gf^j we have = tg£^i/g£^j = j if a < b, and l,/c = jifa>b. This proves point 
(3). It is easy to see that in both cases we have Hk{c) = Hk{j)- Finally, note that every element in the set 
{^c : ^ G U {(,/ c : ^ G j-ifc} has the same height as c, and therefore the same height as 7. □ 

The proposition suggests the following algorithm. 

Algorithm 1 (Algebraic numbers of bounded height). 

Input: A number field K and a boimd B > 1. 

Output: A list of all elements x & K satisfying Hk{x) < B. 
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(1) Create a list L containing the unique element 0. 

(2) Determine a complete setai,...,ak of ideal class representatives for Ok- 

(3) Compute fundamental imits e^, . . . , e^. 

(4) For each a/ : 

(a) Find generators g( i, . . . , for all nonzero principal ideals that are contained in and have 
norm at most B ■ N{ae). 

(b) For each pair of indices if / < and {ge,i, gi,j) = then : 

(i) Find all units u of the form u = e"^ ■ ■ ■ e"' such that Hk{u) < B ■ HK{g{^j/ge,i)- 

(ii) For all such units u, let c = ug/ij/gi j. If Hj^(c) < B, then append to L all elements of the 
form and ^/c where (, E }Ik- 

(5) Return the list L. 

There are known methods [6, §6.5] for carrying out steps 2 and 3 of Algorithm [T] An efficient method for 
step 4a can be found in the article of Fincke and Pohst @]. It remains to explain how the set of units of 
bounded height can be computed. 

Remark. In order to reduce the amount of computer memory used in carrying out Algorithm [TJ compact 
representations (see |22|] ) of algebraic integers can be used. For instance, the number of bits required to 



write down a set of fimdamental imits for K can often be | A|^^^+"(^', where A is the discriminant of K. In 
contrast, using compact representations, a system of fimdamental units can be represented by(log|A|)'^(^) 
bits. All the operations on algebraic numbers that are needed in Algorithm [1] can be done efficiently work- 
ing only with compact representations, thus avoiding the need to store and compute with the numbers 
themselves. 



3.2. Units of Bounded Height. For a given bound D > 1 we wish to compute all units u e such that 
Hk{u) < D. We define a logarithmic map A : W+'^ by 

A(m) = {log\u\1")^^M^ = (l0g|M|^i,...,l0g|M|^,^,l0g|M|2^,...,l0g|M|?^J . 

Let TT : W^^ W be the projection map which deletes the last coordinate. We define A = tt o A. 

Theorem 3.2 (Dirichlet). The map A is a group homomorphism with kernel ji^, the set of roots of unity in K, and 
A{0^ ) is a lattice of full rank in W spanned by the vectors A(ei), . . . , A(£r). 

Note that any unit u with Hk{u) < D satisfies |u|"" < D for all v e M^. Since Hx(l/w) = Hk(m) we also 
have that l/\u\"" <D. Therefore, 

- log D < log \u\^" < log D for all v e M~, 

so A(m) g [— logD, logD]' . The vector A(m) can then be found by computing all points P of the lattice 
A{0^ ) which lie in the box [— log D, log D]''. Note that if u maps to such a point P under A, then 

A-\P) = {u^:^em,}. 
These observations lead to the following algorithm. 

Algorithm 2 (Units of bounded height). 

Input: A number field K and a boimd D > 1. 

Output: A list of all units u E satisfying Hk{u) < D. 



(1) If r = 0, return jak- Otherwise: 

(2) Create an empty list U. 
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(3) Find a set £i,...,er of fundamental units in K. 

(4) Find all points P in the lattice spanned by the A(£,) in W which lie in the box [— log D, log Dy. 

(5) For all such points P : 

Find any unit ii with A(u) = P. If Hk{u) < D, then include in U for all (, e fiK- 

(6) Return the list U. 

By applying a linear transformation, step 4 of Algorithm |2] can be carried out using known methods for 
finding integer points in polytopes [1]. 

Remark. With more work it is possible to replace the box [— log D, log D]'' in step 4 of the algorithm by a 
substantially smaller set: Let V{D) be the polytope in W cut out by the inequalities 

-logD<^x, <logD, 

iel 

where / runs through all nonempty subsets of {1, . . . , r}. ThenP(D) is contained in the box [— log D, log D]' , 
and one can show that its volume is smaller than that of the box by a factor of at least ( lr/2\ !)^. For the 
purpose of finding all imits of height at most D the set V{D) is preferable to the box because of the fol- 
lowing property: for a unit u ^ we have Hf^{u) < D if and only ifA(M) G V{D). It may well happen 
that for some unit ii we have A{u) G [— log D, log DY but Hf^{u) > D; hence, if we use the box as a search 
space, then we must check the height of every unit found. The polytope V{D), in addition to providing a 
smaller search space, eliminates the need to check the heights of the units obtained. We omit the proofs of 
these statements since we will not use the polytope V{D); the box [— log D, log DY works well in practice 
and will suffice for the theoretical analysis of the main algorithm. 

For later reference we record the following fact concerning the number of units of bounded height. 

Lemma 3.3. Fix A > and let e = {£i,. . .,er} be a system of fundamental units in K. There is a constant 
c = c{A,K,e) such that for every hound D >1 + Xthe number of units u e satisfying H[^{u) < D is at most 
c-(logD)'-. 

Proof. Let T be the linear isomorphism of W taking the basis A(ei), . . . , A{£r) to the standard basis for W, 
so that the lattice A(C^ ) maps to the integer lattice Z''. If u = ^e"^ ■ ■ ■ e"'' is a unit with H]^{u) < D, then 
A(m) = Li-^i«,A(e,) E [— logD,logD]'', so T(A(m)) = (nj, n^) is an integer point in the polytope 
T ( [ — log D, log DY)- Each vector in this polytope has Euclidean norm at most M := \\\T\\ ■ ^/r ■ log D] , so 
the polytope is contained in [— M, M]' . This gives at most (2M +1)'^ options for the point (n\, . . . ,n, ) and 
therefore at most {#^k) ■ (2M + 1)' options for u. Thus, we obtain 



(logD)' - > Vlos(l+A) 

and the result follows. □ 



While the algorithms given in this section form a theoretically accurate description of our method, for 
purposes of computing there are possible improvements and necessary modifications to be made. 



4. Implementation of the Algorithm 



There are two issues that must be considered in order to make an accurate implementation of the algorithms 
described above. These issues are due to the fact that in a computer we cannot work exactly with the real 
numbers that appear in the algorithms (heights of elements, logarithms of real numbers, absolute values 
of algebraic numbers), so we must make do with rational approximations of them. We consider now the 
question of finding approximations that are good enough to guarantee correct results. 
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The first issue is that of computing the height of an algebraic number. In carrying out Algorithm[T]one must 
check inequalities of the form Hf^{x) < B for given x E K* and B G IR. In practice, one can only work with 
a rational approximation h of H^{x) and check whether h < B. However, it may happen that Hjs^(x) < B 
even though h > B. To avoid this problem one must be able to find arbitrarily close rational approximations 
ofHK(x). 

The second issue is that of computing lattice points inside a polytope, which is needed in Algorithm |2l 
The lattices that arise in the algorithm are given by bases whose elements have real number entries, and 
the polytopes that arise have vertices with real entries as well. The basis vectors of the lattices and the 
vertices of the polytopes will in practice be replaced by approximations of them. However, great care 
must be taken to ensure that lattice points are not lost in this process of approximation. Consider a lattice 
with real basis ai, . . and a polytope P with real vertices. Finding all lattice points in P amounts to 
finding all integer tuples . . . , n,-) such that njaj + ■ ■ ■ + tird,. E P. In practice, the real vectors a, will 
be replaced by rational vectors /5; approximating them, and the real polytope P by a rational polytope P' 
whose vertices will closely approximate the vertices of P. One then computes the integer tuples (ni, . . . , «, ) 
such that tiifii + • • • + «,-/5,- E P' . However, it is not necessarily the case that tiiai + • • • + «,-«,- E P ■^=^ 
+ • • • + n, /5,. E P' , nor is there necessarily an implication in either direction. It is therefore important 
to be able to compute the /3/ close enough to a; and make P' sufficiently large so that one can prove that at 
least there is an implication riioci + ■ ■ ■ + rirOCr G P =^ "i/^i + ■ ■ ■ + rij-fir G P'- 

There are several ways of dealing with these issues, each one leading to a different implementation of the 
main algorithm. For concreteness, we describe in this section one way of solving these problems, and we 
give the corresponding modifications of the algorithms in the previous section. 

4.1. The Height Function. Given an element x E K* and a real number £ > 0, we wish to compute a 
rational number h such that \h — Hk{x) \ < e. Writing x = ol/ ^ with a, /5 e Ok we have 

N(«,/3)Hk(x)= n max{|a|^M/5|;;"}. 

The height of x can therefore be estimated by finding good approximations of the numbers |a|"'', For 
a fixed place v E there is an embedding a : K ^ C such that \y\v = \c{y) \ for every 1/ e _fC. By writing 
y in terms of powers of a primitive element g for K over Q we reduce the problem of estimating to that 
of estimating cr{g). Since cr{g) is a complex root of the defining polynomial of K, known methods (see fl3l , 
for instance) can be applied to approximate cig) with any given accuracy. 

Algorithm 3 (Height Function). 

Input: Integral elements a, /5 G Oj<^ with /5 7^ and a rational number £ E (0, 1]. 
Output: A rational number h such that \h — H]^{(x./ ^) \ < e. 

(1) Find a rational number B such that for every place v E we have lalo", |/3|{J" < B. 

(2) Let 

^ ^ f 

(B + 2)''i+''2 - (B + l)''i+''2 

and find rational ^^-approximations aj,, bv of |a|""'' and |j6|"", respectively, for every place v E M^. 

(3) Compute N(a, YlveM^ max{ay, by} and return the result. 

The justification for this method is given below. 

Lemma 4.1. Let a.,^ E Ok with /5 7^ 0, and let e E (0, 1] be given. Let B > 1 be a rational number such that 
\oc\'v', 1/3 1"" < Bfor every place v E M~, and set 



(B + 2)''i+''2 - (B + l)''i+''2' 
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For every v <E let aj,,hy e Q satisfy \aj, - \di\"'' \ < 5 and pj, - | /5 1 | < 5. Then, letting 

h = N{a,^y^ Yl max{a-o,b-o} 

ivehave \h — HK(a/j6)| < e. 

Proof. Let R = + r2- For = 0, . . . , R let Sj denote the elementary symmetric polynomial of degree / in R 
variables. For every place v E let fWj, = maxjdi,, foi,} and fix a numbering nii, . . . , mj^ of the nti,. Then 
we have 



NK/5)Hk(«//3)= n max{|a|«M/5|;'''}<n(^ + mR) = £sy(mi 

i;GM~ 1=1 /=0 

R-1 

= N(a,/5)/z+ ^ sy(mi,...,mR)<5«-^'. 

7=0 



Therefore, 



R-1 R-1 R-1 /j^ 



N{a,fi){HK{cc/fi)-h) < Y2sj{mi,...,mR)S''-i < Sj{B + 1, . . . ,B + 1)3''-' = S (B + 1)' i .U^^^-^ 



j=o j=o j=o 

R-1 



j=0 



<<5^(B + iy =s({B + 2f-{B + lf 



In particular, this shows that H]^[ol/ fi) — h < e. In an analogous way one shows that h — HK{ci/ /5) < £. □ 

4.2. Lattice Points in a Box. Let L c W be a lattice with basis aj, . . . , and let B = [— C, C]*" be a box in W, 
where C is a positive rational number. We describe here a method to compute all integer tuples {ni, . . . ,nr) 
such that n\OL\ + ■ ■ ■ + nrCc,- G B. The main idea is to replace the given basis vectors a, with good rational 
approximations /5,, and the box B by a larger rational box B' such that we have an implication 

+ ■ ■ ■ + nrdr G B ==> flijSi + ■ ■ ■ + nr^r G B'. 

Since the basis vectors /5/ and the vertices of B' have rational coordinates, the tuples ...,«,-) can be 
computed using rational arithmetic, thus avoiding errors resulting from floating point calculations. 

Let {ei, . . . , Cr} be the standard basis for IR*^, and let : W W be the linear automorphism mapping e, 
to a,. For a vector x eW we denote by the standard Euclidean norm of x. For a linear map T : IR*^ IR*^ 
we let [I r|| denote the operator norm, 

|r|| = sup \Tx\ , 

\x\<l 

and we also denote by T the matrix of T with respect to the basis ej, . . . , e,-. 
Lemma 4.2. Given rj > 0, suppose is a linear automorphism ofW such that 

||T«-rfl||<l and 11 T^^ - 1,7^ 11 < ^, ^ „ — - . 

II « /3II - II a p II c-y?(l+||T„||) 

Then, with B' = [—C — rj,C + rj]'' we have T-^{B) C r^^(B'). In particular, if we set /S; = T^{ei), then 

niOLi + ■ ■ ■ + Urdr G B =^ «i/5i + ■ ■ ■ + Ur^,- £ B'. 

Proof. Let x e B. Then 

< (i + ||T,||)||r-i-r-i||y?-c<;?. 



Therefore, r^(T-i(x)) e B', so T-^x) e T~\B'). 



□ 



It follows from the lemma that once the basis vectors a, are approximated well enough by vectors j6,, then 
for the purpose of finding lattice points in the box B we can replace B by B' and a^, . . . , by fi^, . . . , fir- 
A matrix satisfying the conditions of Lemma [4.21 can be computed by approximating the entries of the 
matrix well enough. A precise formulation of the required accuracy of approximation can be found in 
Chapter 9]. 

Algorithm 4 (Lattice points in a box). 

Input: A rank r lattice L in R' specified by a basis ai, . . . , a^, and a box B = [—C, Cy, where C is a positive 
rational number. 

Output: A finite list of integer r-tuples which contains all tuples . . . , n^) such that + ■ ■ ■ + UrOtr e B. 

(1) Choose a positive rational number }] and find a matrix with rational entries such that the condi- 
tions of Lemma|4j2]are satisfied. 

(2) Compute the inverse of the matrix Tp. 

(3) Let B' = [—C — rj,C + rjY and return all integer points inside the rational polytope T7^{B'). 



4.3. Units of Bounded Height. Returning now to the context of the number field K with unit group of 
rank r, we wish to compute, for a given bound D > 1, all units ii e such that Hi^{u) < D. The case r = 
is trivial, so we assume that r > 0. We fix a set e^, . . . , of fundamental units. Since multiplication by a 
root of unity does not affect the height of an algebraic number, the computation of units of height at most D 
is equivalent to finding all integer tuples (mj, . . . , rir) such that the unit u = t"^ ■ ■ ■ e"' satisfies Hf^{u) < D. 
As shown in section I3l2l in order to find these tuples we must consider the box [— log D, log DY c IR' . We 
assume that a box B with rational vertices has been found such that [— log D, log D] ' C B. 

Let L c IR'' be the lattice L = A{0^ ) and let a,- = A(e,). For a unit u ^ e"^ ■ ■ ■ e"/ we have 

Hk{u) < D =^ A(m) e [-logD,logD]'' =^ A(u) e B =^ riicti H h Ura,- e B. 

Using Algorithm m applied to the lattice L, basis cti, . . . , a^, and box B, we can then compute all the integer 
tuples . . . ,nr) such that uidi + ■ ■ ■ + rirOCr e B, therefore finding all units of height at most D. 

Algorithm 5 (Units of bounded height). 

Input: A number field K, a boimd D > 1, and a tolerance f e (0, 1] . 
Output: A list U of units such that: 

• If X e satisfies Hf^{x) < D, then x = l,u for some ^ e ji^, ii e LI. 

• Every m e JJ satisfies Hk{u) < D + t. 

(1) If r = 0, return jij^. Otherwise: 

(2) Find a set ej, . . . , of fundamental units in K. 

(3) Defining L, B, and ai, . . . , a,- as above, use Algorithm |4] to find all the integer tuples (ni, . . . , n^) such 
that nidi + ■ ■ ■ + tirdr e B. 

(4) Create an empty list LI. 

(5) For all computed tuples (ni, . . . , Wr) append the unit e"^ ■ ■ ■ e"' to U. 

(6) Use Algorithm |3] to remove elements of LL whose height is at least D + t. 

(7) Remove any duplicate elements and return the list LL. 
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4.4. Revised Algorithm. Using the methods described above we now give a new version of Algorithm[T] 
Algorithm 6 (Algebraic numbers of bounded height). 

Input: A number field K, a bound B > 1, and a tolerance t e (0, 1], with B,t & Q. 
Output: Two lists L and L' such that: 

• If X e X satisfies Hj<;(x) < B, then x is in either L or L' . 

• For every x & L we have Hj^(x) < B. 

• For every x & L' we have B — f < Hk(x) < B + f. 

(1) Create an empty list L' and a list L containing only 0. 

(2) Find a complete set oi, . . . , a;, of ideal class representatives. 

(3) Compute fundamental imits £i, . . . ,£,■■ 

(4) Let M = maxji N{a£) and make a list P of all nonzero principal ideals of Ok having norm at most 
B ■ M. Find a generator for every such ideal. 

(5) For each a(, make a list (gc^i), ■ ■ • , (S'(',S( ) of elements of P contained in and having norm at 
most B ■ ]V(af). 

(6) Choose a small rational number fi e (0,1]. 

(7) For each £ : 

(a) Make a list Rf of pairs (;,;) such that 1 < i < j < Sji and {gi,i,ge,j) = (cif)- 

(b) For every pair (f,y) E compute a rational number r/y such that |r,- y — HK(^f^//^fj)| < fi. 

(8) Let m = B{ti + max( max^^ y^g^^, r/^y). 

(9) Compute a list U containing all units of the form m = e"^ ■ ■ ■ e"'' such that Hi^{u) < m. 

(10) Choose a small rational number t2 E (0, 1], and for every u E U compute a rational number Vu such 
that |r„ — Hk(m) | < t2- If Tu > m + t2, then delete m from (J. 

(11) For each i : 

For each (z,;) e : 

For all units u E U such that r„ < f2 + B(7'/ ^ + h) : 
Let7 = Mgf,,/g<;,y. 

Compute r-y e Q such that |r-y — Hk(7)| < t/2. 

Htj < B — J, then append to L all elements of the form f 7 and where I, E }Ik- 
If — B| < |, then append to L' all elements of the form ^7 and where ^ E }Ik- 

(12) Remove any duplicate elements and return the lists L and L'. 

Note that the list L' consists of elements x E K whose height is so close to B that using the height function 
described in Algorithm |3] it is not possible to decide whether Hk{x) < B with the tolerance specified as 
input. In particular, L' might contain elements of height exactly B. For general number fields K we cannot 
prevent this from occurring; however, for quadratic fields it is possible, as explained below. 

4.5. Case of Quadratic Fields. We give here a way to shorten the list L' from Algorithm[6]in the case of real 
quadratic fields, and to eliminate it altogether in the case of imaginary quadratic fields. 

Proposition 4.3. Let Kbe a quadratic field and let x E K*. Let cr be the generator o/Gal(X/Q). 

(1) IfK is an imaginary field, then Hj<(x) is an integer. 

(2) If K is a real field, then Hk(x) e Q <^=^ max{|x|, |cr(x)|} < 1 or min{|x|, |c7(x)|} > 1. Moreover, if 
Hk{x) E Q, then Hk{x) E Z. 
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Proof. Write x = a/b with a,b & Ok, and let a = {a,b) be the ideal generated by a and b in Ok- Then 
Hk{x) = N{a)^^ Oz-eM" max{|fl|"", There are coprime ideals / and / of Ok such that (a) = a - 1 and 

(b) = a-J. We then have Hjc(x) = N(/) Oi^eM" max{|x|;;M}. 

(1) If K is an imaginary field, then Hk(x) = N(a)-imax{%/Q(fl),NK/Q(fc)} = max{N{I),N{J)} e Z. 

(2) If K is a real field, then Hk(x) = N(/) max{ | j|, 1} ■ max{ |c7-(x) |, 1}. If max{|x|, |£r(x)|} < 1, then 
HKix) = N{}) e Z. Ifmin{|x|,|c7(x)|} > 1, then Hk(x) = N{})\Nk/q{x)\ = N{})N{a)/N{b) = 
N{I) E Z. Now suppose that max{|x|, |cr(x)|} > 1 and min{|x|, |(7(z)|} < 1. Then, without loss of 
generality we may assume that |x| < 1 < |cr(x)|. It follows that x ^ Q, so Hk{x) = N{J)\(7{x)\ i Q. 

□ 

Using Proposition 14.31 it is possible to detect, in the case of real quadratic fields, some elements of the list 
L' from Algorithmic which should be in the list L: if x e L' has height Hk{x) e Q (a condition which can 
be determined), then, by construction of L' it must be the case that Hk{x) is the unique integer closest to B 
(assuming the tolerance t from Algorithm|6]was chosen to be less than 1 /2) . It can therefore be determined 
whether HkIx) < B or not. In the affirmative case, the element x can then be deleted from L' and appended 
to L. Thus, at the end of this process the list L' will only contain elements x G X whose height is irrational 
and very close to B. 

We conclude by noting that for imaginary quadratic fields K there is a modification of Algorithmic which 
is more efficient than this algorithm, since numbers of bounded height in K can be found without ever 
computing the height of an element of K. Moreover, the list L' is in this case unnecessary. 

Lemma 4.4. Let Kbe a number field, let ai, . . . , o;, be integral ideals forming a complete set of ideal class represen- 
tatives for Ok, and let x e X*. Then Hk{x) < B if and only if there is an index £ such that x can be written in the 
form X = Oil f> with a, /3 e Of and 

W n ^^^y^{M:",m•}<B■Niae). 

Proof. One direction follows immediately from the proof of Proposition 13.11 For the other direction, fix 
an index i, let a,/3 G with /3 7^ 0, let x = a//5, and suppose that {-k) holds. Since (a, /3) C a^, then 
N{a{) < N(a,^),so 

HK(x) = N(a,/5)-i n max{|«|M/5|;;''}<N(af)-i max{|a|M/3|;;n < B. 

□ 

Now suppose that K is an imaginary quadratic field. Then the inequality (*) becomes 

max{]VK/Q(«),NK/Q(/5)} < B ■ N(af). 
This observation leads to the following algorithm. 

Algorithm 7 (Algebraic numbers of bounded height in an imaginary quadratic field). 
Input: An imaginary quadratic field K and a boimd B > 1 . 
Output: A list of all elements x E K satisfying Hk{x) < B. 

(1) Create a list L containing the unique element 0. 

(2) Find a complete set ai, . . . , a;, of ideal class representatives. 

(3) For each a£ : 

(a) Find generators gc^i, . . ■ ,g£^S[ for all nonzero principal ideals that are contained in ac and have 
norm at most B ■ N(o^). 
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(b) For each pair of indices i, j with i < j : let c = g(j / ge^j and append to L all elements of the form 
and ^/ c where ^ G /i^- 
(4) Remove any duplicate elements and return the list L. 



5. Efficiency of the algorithm 



We discuss in this section a measure of the efficiency of Algorithm |6] — henceforth abbreviated A6 — and 
of the algorithm of Petho and Schmitt — abbreviated PS — proposed in lilSil . Given a number field K and a 
height bound B, both methods A6 and PS begin by computing some basic objects attached to K : an integral 
basis for Ok in the case of PS; the ideal class group and a set of fundamental units in the case of A6. After 
this step, both methods construct a set of elements of K which is known to contain the desired set of points 
of boimded height; this larger set will be called the search space of the method and denoted by 5ps(B) or 
<Sa6(B)- Once a search space is known, the two methods proceed to compute the height of each element 
in this set to determine whether it is at most B. We will measure the efficiency of a method by comparing 
the size of the search space to the size of the set of elements whose height is at most B. Thus, we define the 
search ratio of PS to be the number 

#{PeK: Hk{P) < B} ' 

and similarly for A6. As shown in Theorem |5.2| below, for a fixed field K the method A6 is asymptotically, 
as B —7- 00, much more efficient than PS (i.e. has a smaller search ratio). However, the search ratio is not the 
only factor determining total computation time: the initial step of computing basic data about the field K 
can be very time-consuming as the discriminant of K grows. Before analyzing the efficiency of the methods 
we consider the computational complexity of this first step. 



5.1. Complexity of the initial step of PS and A6. Finding an integral basis for Ok can be a highly non- 
trivial task when the discriminant A of X is very large. It is known by a theorem of Chistov liSJ that the 
computation of an integral basis for Ok is polynomial-time equivalent to determining the squarefree part 
of the discriminant of a defining polynomial f{x) for K; in other words, the first problem can be solved in 
polynomial time if and only if the second one can. Unfortunately, finding the squarefree part of an integer 
is not much easier than factoring it, and current methods for finding integral bases (see, for instance, |@, 
§6.1]) do indeed begin by factoring disc(/). Assuming the general number field sieve ijij] is used for this 
factorization, the expected running time will be 0{exp{{^dy^^{logd)^^^)), where d = 1+ [log2 disc(/)J 
is the bit length of disc(/). Once an integral basis co = {coi, . . . ,co„} is known, we apply the LLL algorithm 



I HO to the lattice generated by the image of co under the Minkowski embedding O : X ^ R" . This step 
will run in polynomial time 0(n^(logM)'^), where M is the largest Euclidean norm of the vectors <l>(a;,). 

Once an LLL-reduced basis for Ok is known, the computation of a complete set of ideal class representatives 



and a set of fundamental units in K can be done in time at most (2 + log |A|)0(")|A|3/4 (see ilj). This 
appears to be the best known upper bound on the running time for a deterministic computation of class 
groups. Assuming the generalized Riemann hypothesis, there are subexponential probabilistic algorithms: 
Buchmann gives an algorithm which has expected running time 



exp (^(1.7 + o(l))^log|A|loglog|A 

Since PS requires only the computation of an integral basis for Ok, while A6 requires also the class group 
and unit group, the computational complexity of the first step is larger for A6 than for PS. It is therefore 
expected that if A is very large, then the initial step of PS will be significantly faster than that of A6. If, in 
addition, the bound B is very small, then total computation time can be shorter for PS than for A6. For an 
explicit example of this, see %.2l below. We remark, however, that the initial step is a one-time cost, so that 
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once this basic data has been obtained for a number field K, the bound B can be allowed to grow, and then 
A6 will perform better than PS due to its greater efficiency. 



5.2. Search ratios. We recall the result on which PS is based: 

Theorem 5.1 (Petho, Schmitt lEsIl ). Let K be a number field of degree n over Q. Let B e R, B > 1. Denote by 
r2 the number of complex places ofK. Let a>i, . . .,cv„ be an LLL-reduced integral basis for Ok- Then every element 
X & K with Hk{x) < B can be written in the form 

_ aiCOi + ■ ■ ■ + ttnCOn 

c 

where ai,..., an, c are integers satisfying 

l<c<B and <2"("+l)/4-'-2Bc. 

This leads to the following algorithm: 
Algorithm 8 (PS). 

Input: A number field K and a bound B > 1. 

Output: A list of all elements x ^ K satisfying Hk{x) < B. 

(1) Compute an LLL-reduced integral basis toi, . . .,cv„ for Ok- 

(2) Create an empty list L. 

(3) For c = 1 to [BJ : 

(a) LetD = [2"("+i)/4-'-2BcJ . 

(b) For every integer tuple (flj, . . . , fl„) E [— D, D]" : 

(i) Let X = . 

c 

(ii) If Hk{x) < B, then append x to L. 

(4) Return the list L. 



We can now prove our main result comparing the efficiency of PS and A6. 
Theorem 5.2. Let Kbea number field of degree n. The search ratios of PS and A6 satisfy 

»B-- and *""'l.„. «(.ogBr. 



#{PeK: Hk{P) < B} #{P eK: Hk{P) < B} 

where r is the rank of the unit group O^ . 



Proof. By Schanuel's formula llal we know that there is a constant Ck such that 

#{P eK: Hk{P) < B} ~ CkB^. 

A simple calculation shows that the size of the search space in PS satisfies #5ps(B) > B2"2" the 
first statement in the theorem then follows easily. Now let a = {ai, . . . , o;,} be a complete set of ideal class 
representatives for Ok and £ = {ej, ...,£,} a system of fundamental units. For each index i let gf^i, . . . , 
be generators for all nonzero principal ideals that are contained in ac and have norm at most B ■ N(a(^). By 
10- p- 123] we may assume that 

(1) \g,,i\'}f <EK{B-N{a,)Y'('+') 

for every place v e and all indices I, i. Here Ek is a constant which depends on £ but not on B. 

12 



Let P(B) = T!i;=i ^t- Using the bounds given in jisll we find that P(B) ^ B. Following the steps in A6 we 
see that the size of the search space considered in A6 satisfies 

(2) #5a6(B) < P{Bf ■ #{u e Ol : Hk{u) < D}, 

where D is any number such that D > B ■ max^ ,- ^ H^igej/ g{^j)- By (UJ we have 

< ^—^^ < ^—^^ = FkB 

for all £, i,j and for some constant F^- Hence, we may take D = FkB^. By Lemma |33] we have 

#{u e Ol : Hk{u) < D} < (logB)^ 

Therefore, by ^ the size of the search space in A6 satisfies #5a6(B) ^ B^(log B)''. The second statement in 
the theorem follows from this inequality and Schanuel's asymptotic estimate. □ 



6. Performance of the algorithm 



Having done a theoretical analysis of the methods PS and A6 in the previous section, we show in this 
section how the methods perform in practice. Both algorithms have been implemented in Sage [20]. All 
computations below have been done on a Mac Pro with a Quad-Core 2.26 GHz processor and 8 GB of 
memory. In all examples, A6 is used with a tolerance of 10"^*^, and heights in PS are computed using 100 
bits of precision for the embeddings of the number field K. When K is imaginary quadratic. Algorithm [7] 
(henceforth abbreviated A7) is used instead of A6. 

The computations presented in this section are intended to make a comparison of the performances of A6, 
A7, and PS in practice. We will first determine the range within which PS can operate (in terms of number 
field degrees and height bounds); next, we compare A6 and A7 with PS within this range. Finally, we show 
that A6 and A7 can run efficiently on many examples that are well beyond the range of applicability of PS. 
In order to be able to give a substantial amount of examples, we we will only consider number fields K and 
height bounds B for which the computation of the set {x G K : Hf^ (x) < B} requires at most 10 hours using 
A6, A7 or PS. 

6.1. Limits of PS. TableUbelow lists the time required for computing the set {x G K : Hk{x) < B} for three 
number fields K and bounds B using PS. The field is specified by its defining polynomial in the variable 
t. In each case the field was chosen so that, among all number fields of equal degree, it has minimal 
absolute discriminant and maximal number of complex embeddings (such data may be found in Jones's 
number field database ||9|]). This choice minimizes the amount of time spent on steps 1 and 3 of PS, therefore 
minimizing total computation time. Thus, for any boimd B and for number fields of fixed degree, the fields 
given in the table represent a best-case scenario for PS. However, even with the small values of B chosen 
here, the computation times exceed our set limit of 10 hours. 



Number field K 


Height bound B 


PS time 


ti -t'^ + t + 1 


2 


33.64 hours 


f3 - f2 + 1 


5 


20.84 hours 


t^-t + 1 


25 


16.27 hours 



Table 1 . Sample computations with PS 



In view of these times, we will not carry out any computations using PS over fields of degree larger than 
3. Moreover, for quadratic fields we will only consider height bounds B < 20, and for cubic fields only 
bounds B < 4. 
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6.2. Comparing A6 and A7 with PS. The four tables below contain the results of computations done using 
both PS and A6/A7 over quadratic and cubic fields, and are meant to give representative examples of 
the efficiency of the methods. Number fields are chosen to have nontrivial class group so that computing 
time for A6 and A7 will not be optimal. In the tables, a number field K is specified by giving a defining 
polynomial for it in the variable t. The class number of K is given, then the height bound used for the 
particular computation, and then the computing times and search ratios of the two methods. 



Field K 


#C1(X) 


Bound B 


PS time 


A7 time 


PS search ratio 


A7 search ratio 




6 


20 


5.41 hours 


0.36 seconds 


96,233 


2.44 


f + 9026 


160 


20 


5.39 hours 


4.67 seconds 


330,540 


8.73 


+ 49661 


424 


20 


4.83 hours 


26.28 seconds 


330,540 


9.08 


f + 312311 


1001 


20 


4.88 hours 


54.2 seconds 


330,540 


14.65 



Table 2. PS and A7 over imaginary quadratic fields 



Field K 


#C1(K) 


Bound B 


PS time 


A6 time 


PS search ratio 


A6 search ratio 


- 36865 


52 


15 


9.95 hours 


5.17 seconds 


495,268 


3.20 


f - 254017 


124 


15 


9.95 hours 


21 seconds 


495,268 


1.06 


P - 627265 


206 


15 


9.28 hours 


46 seconds 


495,268 


1.06 


P - 705601 


254 


15 


10.25 hours 


51 seconds 


495,268 


1.06 



Table 3. PS and A6 over real quadratic fields 



Field K 


#C1(X) 


Bound B 


PS time 


A6 time 


PS search ratio 


A6 search ratio 


+ lit - 1 


13 


4 


4.26 hours 


1.78 seconds 


10^ 


1.33 


45f - 93 


53 


4 


4.95 hours 


30.66 seconds 


10^ 


1.33 


- Ult - 1004 


87 


4 


4.54 hours 


3.45 minutes 


3 X 10'' 


1.33 


t^-t^ + 19At - 944 


123 


4 


4.56 hours 


3.69 minutes 


3 X 10^ 


1.33 



Table 4. PS and A6 over cubic fields with one real embedding 



Field K 


#C1(X) 


Bound B 


PS time 


A6 time 


PS search ratio 


A6 search ratio 


i^-t^- 17t - 16 


4 


2.7 


2 hours 


0.75 seconds 


219,501 


1.33 


i^-t^- 25t + 24 


8 


2.7 


2 hours 


1.47 seconds 


219,501 


1.33 


t^-i^- 55t - 77 


13 


2.7 


2 hours 


22 seconds 


219,501 


1.33 


t^ -t^ - 49f + 48 


16 


2.7 


1.88 hours 


3.56 seconds 


219,501 


1.33 



Table 5. PS and A6 over totally real cubic fields 



As mentioned in il5.1[ PS may be faster than A6 if the discriminant of K is very large and B is very small. For 
example, the computation of all elements of height at most 5 in the quadratic field K = Q(-\/3596 12476 105) 
with class number 53,936 takes 2.47 minutes using PS, but using A6 the computation did not terminate 
within 10 hours. This difference is due to the expense of computing ideal class representatives. 
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6.3. Performance of A6 and A7. We end by giving a series of examples showing how A6 and A7 perform 
over number fields of various degrees and with several different height bounds. 



Bound B 


A7 time 


Search ratio 


Elements found 


200 


1.95 seconds 


1.42 


15,275 


1,000 


37.27 seconds 


1.43 


393,775 


3,000 


6.19 minutes 


1.42 


3,523,651 


5,000 


19.75 minutes 


1.41 


9,761,079 



Table 6. Computing times for A7 over the field K = 0(^-107) 



Bound B 


A6 time 


Search ratio 


Elements found 


200 


20.27 seconds 


11.98 


14,331 


1,000 


6.30 minutes 


14.94 


366,395 


3,000 


64.1 minutes 


18.28 


3,316,303 


5,000 


3.45 hours 


19.86 


9,161,731 



Table 7. Computing times for A6 over the field K = Q{V91) 



Bound B 


A6 time 


Search ratio 


Elements foimd 


200 


57 seconds 


68.08 


75,027 


500 


10.43 minutes 


125.76 


528,459 


1,000 


52 minutes 


149.93 


2,073,303 


3,000 


9.64 hours 


186.94 


18,261,363 



Table 8. Computing times for A6 over the sextic cyclotomic field K = Q(^7) 



Bound B 


A6 time 


Search ratio 


Elements found 


100 


28.21 minutes 


12,597.70 


8,527 


200 


1.68 hours 


18,357.30 


34,063 


300 


3.52 hours 


16,975.15 


80,431 


400 


21.05 hours 


64,830.38 


147,463 



Table 9. Computing times for A6 over the field K : t'^^ - t'^'^ + - + - + - t + 1 
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